$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0da87c3-0506-4956-8446-99aab80b63d7.roa File: d0da87c3-0506-4956-8446-99aab80b63d7.roa (raw, json) Hash identifier: dFEGPUkTl6KoIeU9gqb6K/W8kRoUO47EHGC3gYqvi4o= Subject key identifier: DF:23:31:B5:D7:E1:75:15:E9:5A:6F:FA:AD:4B:A0:1C:EF:3B:9A:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 191F89D360F0EAC741B24261571E18042E5FA98F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0da87c3-0506-4956-8446-99aab80b63d7.roa Signing time: Thu 30 Jul 2026 00:10:45 +0000 ROA not before: Thu 30 Jul 2026 00:10:45 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1f:89:d3:60:f0:ea:c7:41:b2:42:61:57:1e:18:04:2e:5f:a9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 00:10:45 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=34ad085c5ebe52b1d0116211346c25268a93ba567f7f129b959288f2e0879462, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:3d:f9:27:87:20:88:1b:08:af:71:22:e5: 1a:2d:3a:26:f4:4a:de:08:b9:e1:6d:42:74:72:43: ed:ac:d2:18:24:d0:43:7d:08:fe:2d:c0:75:28:e7: 5e:0c:2e:d4:34:7f:f6:6e:90:af:ff:53:9f:e8:96: 94:fb:20:69:4a:53:f8:60:90:ad:b5:e4:02:e5:13: 56:47:51:aa:d6:f8:54:9b:57:28:94:ac:19:57:10: 80:5e:e5:a0:e5:c7:47:f6:81:93:fb:d7:42:21:bd: 01:86:57:c9:a7:d0:09:68:06:4b:70:a4:2c:27:97: 11:4d:55:12:04:ae:ba:6b:dd:cc:bc:99:49:9d:79: 22:cb:10:c1:e4:7b:84:68:97:ea:ac:d5:82:92:30: a3:55:79:8b:40:03:d7:3d:9d:34:f7:8d:af:47:9c: ea:cb:34:ed:3b:b7:b2:79:03:1e:68:21:57:92:52: d3:3d:f9:d1:04:3d:d2:31:78:22:84:d0:53:63:62: d3:cc:6a:92:83:ce:ca:77:47:51:69:d5:15:5e:13: b3:6e:5d:da:5d:a3:29:69:7c:05:ba:0b:a1:06:87: 5c:b5:08:8d:ef:b2:df:1b:db:5c:1f:20:e9:d6:34: 95:4a:b4:01:97:e3:81:8d:50:65:c0:3d:4a:70:60: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:31:B5:D7:E1:75:15:E9:5A:6F:FA:AD:4B:A0:1C:EF:3B:9A:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0da87c3-0506-4956-8446-99aab80b63d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 0c:cb:09:aa:f9:1b:6e:ba:5f:7c:ed:12:3b:8d:53:39:f6:b2: c3:21:84:32:0f:c3:a7:ee:22:3c:b3:d5:87:c2:03:6f:23:ad: ab:d9:5b:62:69:4f:60:4f:d1:e7:6b:51:8f:e0:3d:ac:a6:1f: ec:9b:62:8f:db:f1:10:0e:97:92:8c:fd:22:06:90:a8:86:45: 9b:2b:54:5e:5e:89:38:29:4c:7b:7a:67:a2:4b:83:f2:da:44: 21:e1:a7:61:6d:ab:77:ed:60:8c:62:92:f2:8f:86:c3:4d:06: ec:24:5f:d7:a8:d3:5b:7c:3b:ba:85:8a:29:9e:b9:54:e8:cd: 72:d2:ea:ce:33:ba:9f:60:4f:51:e7:f8:05:53:54:55:b6:de: 33:e0:e2:ea:4e:90:6e:55:74:09:a3:6d:f9:52:bb:51:3c:89: cb:04:ec:54:86:00:91:6b:93:95:9f:64:3c:d3:55:f3:1c:4f: 87:d3:15:88:84:6d:79:be:f0:a5:dc:f2:f8:c6:e8:ae:6f:e1: 9b:9e:4b:91:fb:09:7c:2e:d5:05:d8:5d:b2:f7:53:8b:84:b6: e2:f6:40:7a:2e:0b:80:56:e9:0a:29:e3:0b:63:88:a3:6a:53: 59:5b:19:a4:5d:23:e0:b2:bb:ef:4e:9d:0c:94:1c:f1:e4:49: b3:64:99:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGR+J02Dw6sdBskJhVx4YBC5fqY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMDAwMTA0NVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAMzRhZDA4NWM1ZWJlNTJiMWQwMTE2 MjExMzQ2YzI1MjY4YTkzYmE1NjdmN2YxMjliOTU5Mjg4ZjJlMDg3OTQ2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6U9+SeHIIgbCK9xIuUaLTom9Ere CLnhbUJ0ckPtrNIYJNBDfQj+LcB1KOdeDC7UNH/2bpCv/1Of6JaU+yBpSlP4YJCt teQC5RNWR1Gq1vhUm1colKwZVxCAXuWg5cdH9oGT+9dCIb0BhlfJp9AJaAZLcKQs J5cRTVUSBK66a93MvJlJnXkiyxDB5HuEaJfqrNWCkjCjVXmLQAPXPZ00942vR5zq yzTtO7eyeQMeaCFXklLTPfnRBD3SMXgihNBTY2LTzGqSg87Kd0dRadUVXhOzbl3a XaMpaXwFuguhBodctQiN77LfG9tcHyDp1jSVSrQBl+OBjVBlwD1KcGBpHwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN8jMbXX4XUV6Vpv+q1LoBzvO5rNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QwZGE4N2MzLTA1MDYtNDk1Ni04NDQ2LTk5YWFiODBiNjNkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yDAMA0GCSqGSIb3DQEBCwUAA4IBAQAMywmq+Rtuul987RI7 jVM59rLDIYQyD8On7iI8s9WHwgNvI62r2VtiaU9gT9Hna1GP4D2sph/sm2KP2/EQ DpeSjP0iBpCohkWbK1ReXok4KUx7emeiS4Py2kQh4adhbat37WCMYpLyj4bDTQbs JF/XqNNbfDu6hYopnrlU6M1y0urOM7qfYE9R5/gFU1RVtt4z4OLqTpBuVXQJo235 UrtRPInLBOxUhgCRa5OVn2Q801XzHE+H0xWIhG15vvCl3PL4xuiub+GbnkuR+wl8 LtUF2F2y91OLhLbi9kB6LguAVukKKeMLY4ijalNZWxmkXSPgsrvvTp0MlBzx5Emz ZJm4 -----END CERTIFICATE-----Generated at Wed Aug 26 15:02:44 2026 by rpki-client